Arubanetworks Fabric Composer — known CVE vulnerabilities

Every CVE whose affected-product data names Arubanetworks Fabric Composer, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (57)

• CVE-2026-76657 — CVSS 10.0 (critical): Vulnerabilities have been identified in the API of HPE Networking Fabric Composer that could potentially allow an unauthenticated remote…
• CVE-2026-76658 — CVSS 10.0 (critical): A vulnerability has been identified in the SSH daemon of HPE Networking Fabric Composer that could allow an unauthenticated remote attacker…
• CVE-2026-19766 — CVSS 9.6 (critical): An authentication bypass vulnerability exists in the underlying operating system of HPE Networking Fabric Composer. Successful exploitation…
• CVE-2026-73700 — CVSS 9.0 (critical): A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an authenticated low privilege operator…
• CVE-2026-73701 — CVSS 9.0 (critical): An unauthenticated remote code execution vulnerability exists in the underlying operating system of HPE Networking Fabric Composer and…
• CVE-2026-73703 — CVSS 8.8 (high): A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthenticated adjacent attacker to…
• CVE-2026-73705 — CVSS 8.8 (high): An arbitrary file write vulnerability in the API of HPE Networking Fabric Composer could allow an authenticated low privilege operator user…
• CVE-2026-73704 — CVSS 8.8 (high): A command sanitization bypass exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated low…
• CVE-2026-73702 — CVSS 8.8 (high): A privilege escalation vulnerability exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow an…
• CVE-2026-73706 — CVSS 8.6 (high): A vulnerability in the API of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to obtain limited system…
• CVE-2026-73707 — CVSS 8.5 (high): Privilege escalation vulnerabilities exist in the API of HPE Networking Fabric Composer. Successful exploitation could allow an…
• CVE-2026-73709 — CVSS 8.3 (high): A vulnerability in the underlying operating system of HPE Networking Fabric Composer could allow an unauthenticated adjacent attacker to…
• CVE-2026-73708 — CVSS 8.3 (high): A business logic vulnerability exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated…
• CVE-2026-73710 — CVSS 8.2 (high): Vulnerabilities in an API endpoint of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to conduct a denial of…
• CVE-2026-73711 — CVSS 8.1 (high): A privilege escalation vulnerability exists in the API endpoint of HPE Networking Fabric Composer. Successful exploitation could allow an…
• CVE-2026-73712 — CVSS 8.1 (high): A vulnerability in the API of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to run arbitrary commands on…
• CVE-2026-73713 — CVSS 7.8 (high): Local privilege-escalation vulnerabilities have been discovered in HPE Networking Fabric Composer. Successful exploitation of these…
• CVE-2026-73714 — CVSS 7.6 (high): A sensitive information disclosure vulnerability exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow…
• CVE-2026-73715 — CVSS 7.5 (high): A vulnerability in the API of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to conduct a denial of service…
• CVE-2026-73717 — CVSS 7.5 (high): A command injection vulnerability exists in the web-based management interface of HPE Networking Fabric Composer that could allow an…
• CVE-2026-73716 — CVSS 7.5 (high): A remote code execution vulnerability exists in the underlying operating system of HPE Networking Fabric Composer that could allow an…
• CVE-2026-73718 — CVSS 7.4 (high): A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to…
• CVE-2026-73722 — CVSS 7.2 (high): Command injection vulnerabilities in the web-based management interface of HPE Networking Fabric Composer could allow an authenticated…
• CVE-2026-73719 — CVSS 7.2 (high): An arbitrary file write vulnerability exists in the API of HPE Networking Fabric Composer and could allow an authenticated administrative…
• CVE-2026-73720 — CVSS 7.2 (high): Insecure file operations in the API of HPE Networking Fabric Composer could allow an authenticated remote attacker to achieve remote code…
• CVE-2026-73721 — CVSS 7.2 (high): Vulnerabilities in the API of HPE Networking Fabric Composer could allow an authenticated remote attacker to conduct SQL injection attacks…
• CVE-2026-73724 — CVSS 7.1 (high): Privilege escalation vulnerabilities exist in the API of HPE Networking Fabric Composer. Successful exploitation could allow an…
• CVE-2026-73723 — CVSS 7.1 (high): A privilege escalation vulnerability exists in the web-based management interface of HPE Networking Fabric Composer. Successful…
• CVE-2026-73725 — CVSS 7.0 (high): A local privilege-escalation vulnerability has been discovered in HPE Networking Fabric Composer. Successful exploitation of this…
• CVE-2026-73726 — CVSS 6.8 (medium): A vulnerability has been identified in the underlying operating system of HPE Networking Fabric Composer that could potentially allow an…
• CVE-2025-23053 — CVSS 6.5 (medium): A privilege escalation vulnerability exists in the web-based management interface of HPE Aruba Networking Fabric Composer. Successful…
• CVE-2026-73727 — CVSS 6.5 (medium): Vulnerabilities in the API of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to access sensitive…
• CVE-2026-73728 — CVSS 6.5 (medium): Denial-of-service vulnerabilities exist in the API of HPE Networking Fabric Composer that could allow an authenticated low privilege…
• CVE-2026-73729 — CVSS 6.5 (medium): A vulnerability in the underlying operating system of HPE Networking Fabric Composer could allow an authenticated low privilege operator…
• CVE-2026-73730 — CVSS 6.5 (medium): A privilege escalation vulnerability exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow an…
• CVE-2025-23054 — CVSS 6.5 (medium): A vulnerability in the web-based management interface of HPE Aruba Networking Fabric Composer could allow an authenticated low privilege…
• CVE-2026-73731 — CVSS 6.1 (medium): A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to…
• CVE-2026-73732 — CVSS 5.6 (medium): A vulnerability in the underlying operating system of HPE Networking Fabric Composer could allow an authenticated low privilege operator…
• CVE-2025-23057 — CVSS 5.5 (medium): A vulnerability in the web management interface of HPE Aruba Networking Fabric Composer could allow an authenticated remote attacker to…
• CVE-2025-23056 — CVSS 5.5 (medium): A vulnerability in the web management interface of HPE Aruba Networking Fabric Composer could allow an authenticated remote attacker to…
• CVE-2025-23055 — CVSS 5.5 (medium): A vulnerability in the web management interface of HPE Aruba Networking Fabric Composer could allow an authenticated remote attacker to…
• CVE-2026-73735 — CVSS 5.4 (medium): Vulnerabilities in the API of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to access some…
• CVE-2026-73733 — CVSS 5.4 (medium): Authentication bypasses in the API of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to circumvent…
• CVE-2026-73734 — CVSS 5.4 (medium): A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to…
• CVE-2026-73736 — CVSS 5.3 (medium): A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to…
• CVE-2026-73737 — CVSS 4.8 (medium): An unauthenticated path traversal vulnerability exists in the API endpoint of HPE Networking Fabric Composer. Successful exploitation could…
• CVE-2026-73738 — CVSS 4.7 (medium): A vulnerability in the underlying operating system of HPE Networking Fabric Composer could allow an authenticated low privilege operator…
• CVE-2026-73740 — CVSS 4.4 (medium): A local privilege escalation vulnerability in HPE Networking Fabric Composer could allow an authenticated privileged user on the underlying…
• CVE-2026-73739 — CVSS 4.4 (medium): A vulnerability exists in the API of HPE Networking Fabric Composer that allows for an attacker with administrative privileges to access…
• CVE-2026-73741 — CVSS 4.3 (medium): A vulnerability in the API of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to view some system…
• CVE-2026-73742 — CVSS 4.3 (medium): A vulnerability in an API endpoint of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to spoof the…
• CVE-2026-73743 — CVSS 3.7 (low): A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to…
• CVE-2026-73744 — CVSS 3.5 (low): A denial-of-service vulnerability exists in the web-based management interface of HPE Networking Fabric Composer that could allow an…
• CVE-2026-73746 — CVSS 3.1 (low): A denial-of-service vulnerability exists in the API of HPE Networking Fabric Composer that could allow an authenticated low privilege…
• CVE-2026-73745 — CVSS 3.1 (low): A vulnerability in the API endpoint of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to view some…
• CVE-2026-73747 — CVSS 2.5 (low): A local privilege-escalation vulnerability has been discovered in HPE Networking Fabric Composer. Successful exploitation could allow an…
• CVE-2026-73748 — CVSS 2.2 (low): A vulnerability in the affected interface of HPE Networking Fabric Composer allows an attacker with administrative privileges to access…